9.8
Critical
CVE-2025-61882 Oracle E-Business Suite Unspecified Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Ransomware campaigns
Known to be used
Description
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in takeover of Oracle Concurrent Processing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Oracle Concurrent Processing 12.2 | 12.2.3 → 12.2.14 | No fix stated |
Other CVEs of Oracle Concurrent Processing
The 7 CVEs of Oracle Concurrent Processing →
CVE-2026-101844
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Concurrent Requests)
3.1
Low
CVE-2026-101707
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues)
7.4
High
CVE-2026-101704
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other)
8.2
High
CVE-2026-101701
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission…
6.0
Medium